Amazon Linux 2023 : nvidia-imex (ALAS2023NVIDIA-2026-305)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2026-305 advisory. NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out- of-bounds write. A successful exploit of this vulnerability might lead to denial of...

Important: nvidia-persistenced

Issue Overview: NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code...

Important: nvidia-kmod-common

Issue Overview: NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code...

Amazon Linux 2023 : libnvidia-nscq (ALAS2023NVIDIA-2026-308)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2026-308 advisory. NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out- of-bounds write. A successful exploit of this vulnerability might lead to denial of...

Amazon Linux 2023 : kmod-nvidia-open-dkms (ALAS2023NVIDIA-2026-310)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2026-310 advisory. NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out- of-bounds write. A successful exploit of this vulnerability might lead to denial of...

Amazon Linux 2023 : nvidia-kmod-common (ALAS2023NVIDIA-2026-304)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2026-304 advisory. NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out- of-bounds write. A successful exploit of this vulnerability might lead to denial of...

Amazon Linux 2023 : kmod-nvidia-latest-dkms (ALAS2023NVIDIA-2026-311)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2026-311 advisory. NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out- of-bounds write. A successful exploit of this vulnerability might lead to denial of...

Amazon Linux 2023 : libnvsdm, libnvsdm-devel (ALAS2023NVIDIA-2026-307)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2026-307 advisory. NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out- of-bounds write. A successful exploit of this vulnerability might lead to denial of...

Amazon Linux 2023 : nvidia-open (ALAS2023NVIDIA-2026-301)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2026-301 advisory. NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out- of-bounds write. A successful exploit of this vulnerability might lead to denial of...

Amazon Linux 2023 : nvidia-fabric-manager-devel, nvidia-fabricmanager (ALAS2023NVIDIA-2026-306)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2026-306 advisory. NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out- of-bounds write. A successful exploit of this vulnerability might lead to denial of...

Amazon Linux 2023 : libnvidia-cfg, libnvidia-fbc, libnvidia-gpucomp (ALAS2023NVIDIA-2026-309)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2026-309 advisory. NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out- of-bounds write. A successful exploit of this vulnerability might lead to denial of...

Amazon Linux 2023 : cuda-compat-13-0 (ALAS2023NVIDIA-2026-313)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2026-313 advisory. NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out- of-bounds write. A successful exploit of this vulnerability might lead to denial of...

CVE-2026-16796 Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_packages()

Improper neutralization of argument delimiters in the installpackages method in AWS Bedrock AgentCore Python SDK before 1.18.1 might allow a remote authenticated user to execute arbitrary commands within the Code Interpreter sandbox via crafted package name arguments. To mitigate this issue, user...

CVE-2026-16756

Missing connection and header-read timeouts and the absence of a concurrent-connection cap in the default serve path of Amazon aws-smithy-http-server might allow remote attackers to cause a denial of service by opening many connections and sending partial requests that are never completed,...

CVE-2026-16584 AWS API MCP Server Security Policy Bypass via Startup Failure

Improper handling of an initialization failure in AWS API MCP Server from 0.2.13 through 1.3.46 might allow an actor to bypass the user-configured security policy and execute AWS API operations that the policy was set to deny or gate. When initialization of the security policy enforcement data...

CVE-2026-16584 AWS API MCP Server Security Policy Bypass via Startup Failure

Improper handling of an initialization failure in AWS API MCP Server from 0.2.13 through 1.3.46 might allow an actor to bypass the user-configured security policy and execute AWS API operations that the policy was set to deny or gate. When initialization of the security policy enforcement data...

Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs

RefluXFS, a Linux kernel flaw disclosed on July 22 and tracked as CVE-2026-64600, lets an unprivileged local user overwrite root-owned files on an XFS filesystem and gain persistent root access. Qualys said default installations of Red Hat Enterprise Linux and its derivatives, Fedora Server, and...

OPENSUSE-SU-2026:11345-1 amazon-ecs-init-1.105.0-2.1 on GA media

These are all security issues fixed in the amazon-ecs-init-1.105.0-2.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-64006

Name of the Vulnerable Software and Affected Versions AWS API MCP Server versions 0.2.13 through 1.3.46 Description Improper handling of an initialization failure during server startup allows an actor to bypass the user-configured security policy. If the data used to enforce the security policy...

PT-2026-64146

Name of the Vulnerable Software and Affected Versions aws-smithy-http-server versions prior to 0.66.5 Description An issue in the default serve path of Amazon aws-smithy-http-server allows unauthenticated Slowloris denial of service. This occurs due to missing connection and header-read timeouts...